Subprocessors
Oona v1 Beta
Last updated: May 20, 2026
Privacy contact: privacy@oona.casa
This page lists third-party providers that may process personal information or user content to operate Oona. Each provider listed below operates under a data processing agreement or equivalent terms. Providers may process data in the United States and other regions; see the International Transfers section of the Privacy Policy for more detail.
| Provider | Purpose | Data processed | Notes |
|---|---|---|---|
| Supabase | Database, authentication, storage, magic-link email | Account data, profile/settings, uploads, generated content, chat, room analysis, auth session data | Private images bucket for new access; signed URLs generated by Oona. |
| Vercel | App hosting, edge/runtime, logs | Request metadata, IP/device data, deployment/build/runtime logs | — |
| Vercel AI Gateway | AI routing and provider gateway | Prompts, signed image URLs, model IDs, outputs, metadata | Routes AI requests to the model providers below. |
| Google Gemini / Google Vertex | AI model provider | Prompts, signed image URLs, room metadata, generated responses | Under Gemini API paid-services terms, prompts and responses are not used to improve Google's products. |
| Anthropic Claude | AI model provider | Prompts, signed image URLs, generated responses | Under Anthropic's commercial terms, models are not trained on customer content. |
| OpenAI | AI model provider and image-generation fallback | Prompts, image-generation parameters, generated outputs | Under OpenAI's API terms, API data is not used to train OpenAI models by default. |
| Langfuse | Hosted AI observability | Prompts, outputs, user IDs, session IDs, project IDs, latency/model metadata | Used for AI reliability and debugging; does not train on client data. |
| PostHog | Consent-gated product analytics | Account ID/email if identified and consented, events, page views, referrer, feature usage | Off until you grant analytics consent. |
| Sentry | Error monitoring and diagnostics | User ID, scrubbed errors, stack traces, diagnostic context | Default PII disabled; Replay disabled for beta. |
| Google OAuth | Optional identity provider | Google email/profile data used for login | Only if you choose Google login. |
Oona does not currently use payment, advertising/affiliate, or custom email-sending providers (beyond the default Supabase Auth email flow). If we add any of these, we will update this page before they process your data.
Changes
We will update this page when we add, remove, or change a subprocessor. Contact support@oona.casa with questions about our subprocessors.
Back to Oona